Ask HN: How are you all ensuring your AI code isn't slop?

Pando, an open-source, self-hosted platform for deploying AI-written internal apps, has launched in alpha under the AGPL-3.0 license, with a commercial license available for embedding it in proprietary products or hosting it as a service. Pando builds an app from a git repo or image, scans it for vulnerabilities, runs it on an isolated network, and places it behind company SSO so it is shared only with the people who need it. The project targets IT and platform teams whose employees deploy internal tools without hosting them on laptops or personal cloud accounts, requires Docker and Docker Compose, and warns of breaking changes before upgrading.

demo.mp4 Pando is an open-source, self-hosted platform for running the apps your team builds, including ones written with AI. Point it at a git repo or image and it builds the app, scans it for vulnerabilities, runs it on its own isolated network, and puts it behind your company's SSO, shared only with the people who need it. Built for IT and platform teams who want employees to deploy internal tools without those tools living on laptops or personal cloud accounts. Also works on a home server. Status: alpha. Expect breaking changes; see the CHANGELOG https://github.com/trypando/pando/blob/main/CHANGELOG.md before upgrading. Needs Docker and Docker Compose. Quickstart → https://trypando.ai/quickstart Install Pando with the quickstart https://trypando.ai/quickstart . On trypando.ai/docs https://trypando.ai/docs : - API https://trypando.ai/docs/api , CLI https://trypando.ai/docs/cli and MCP server https://trypando.ai/docs/mcp - Errors https://trypando.ai/docs/errors and Events https://trypando.ai/docs/events - Adapters https://trypando.ai/docs/adapters and Configuration https://trypando.ai/docs/configuration In this repository: - docs/identity-providers.md https://github.com/trypando/pando/blob/main/docs/identity-providers.md : connecting Okta, Microsoft Entra ID, Google Workspace, Keycloak, Authentik or another provider, and SCIM. - docs/rootless.md https://github.com/trypando/pando/blob/main/docs/rootless.md : running Pando on rootless Docker or Podman on Linux. - docs/reference.md https://github.com/trypando/pando/blob/main/docs/reference.md : running on several hosts or on Kubernetes, host policy at startup, and what an app receives from Pando. - CHANGELOG.md https://github.com/trypando/pando/blob/main/CHANGELOG.md : what changed in each release, and whether you need to act. - A bug , or something that doesn't work as documented: open an issue https://github.com/trypando/pando/issues/new/choose . - A security vulnerability : privately, through the advisory form https://github.com/trypando/pando/security/advisories/new , not as an issue. See SECURITY.md https://github.com/trypando/pando/blob/main/SECURITY.md for what to include and what response to expect. - A question : Discussions https://github.com/trypando/pando/discussions . Bug reports and pull requests are welcome. See CONTRIBUTING.md https://github.com/trypando/pando/blob/main/CONTRIBUTING.md for how the project is organized, how to build it, and what a change needs before it can be merged. CODE OF CONDUCT.md https://github.com/trypando/pando/blob/main/CODE OF CONDUCT.md applies everywhere the project happens. AGPL-3.0, with a commercial license available for embedding Pando in a proprietary product or offering it as a hosted service without publishing modifications. See LICENSING.md https://github.com/trypando/pando/blob/main/LICENSING.md for which applies to you, and LICENSE https://github.com/trypando/pando/blob/main/LICENSE for the full text. Contributors sign the Contributor License Agreement https://github.com/trypando/pando/blob/main/CONTRIBUTOR AGREEMENT.md once, by posting a comment on their first pull request.